Closed Bug 1310413 Opened 8 years ago Closed 5 years ago

Cannot import certificate

Categories

(Thunderbird :: Preferences, defect)

Product:
Thunderbird
Component:
Preferences
Version:
45 Branch
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED INCOMPLETE

People

(Reporter: bugzilla, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:49.0) Gecko/20100101 Firefox/49.0
Build ID: 20160922113459

Steps to reproduce:

1. Create a new SMIME certificate with StartSSL in Firefox
2. Export the certificate into a .p12 file with a password
3. Open certificate manager in Thunderbird
4. Import the new file
5. Enter password


Actual results:

A message box confirms that the certificate has been restored. But it's not anywhere in the list and can't be selected for any mail account.


Expected results:

It should work.
How do you create a certificate in FF? Maybe something self-signed à la:
http://kb.mozillazine.org/Getting_an_SMIME_certificate

If the certificate was imported into TB, then I assume that it indeed worked. You can only select certificates that haven't expired in for mail signing and only those are visible in
Account Setttings, Security Setting of the selected account.

Maybe the self-signed certificate is rejected by TB.

If you give me the steps to do it in FF, I can try. Sadly, I'm not a security expert, but I know one ;-)

Cykesiopka, could you shed some light on this, please.
Flags: needinfo?(cykesiopka.bmo)
It's a regular public certificate from StartSSL, I've done this before.

I eventually could import it. I just exported it again in Firefox and gave it to Thunderbird. I'm not quite sure what I did differently. Maybe I accidently exported an old version of the cert the first time. And then Thunderbird might have happily accepted, but failed to tell me that what I wanted to import was already there.
Unfortunately I'm not at all familiar with the .p12 related code.
I'll look into this in the next few days though.
Flags: needinfo?(cykesiopka.bmo)

Cykesiopka, are you still able to look at this?

Flags: needinfo?(cykesiopka.bmo)

Sadly, no, sorry.

Flags: needinfo?(cykesiopka.bmo)
Flags: needinfo?(kaie)

The StartSSL CA no longer exists.

When it still existed, I did the above myself, and it had worked.

I'm marking this as incomplete, it's unlikely that we can even reproduce the original issue.

Status: UNCONFIRMED → RESOLVED
Closed: 5 years ago
Flags: needinfo?(kaie)
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.